Security audit
Security checks across malware telemetry and agentic risk
The skill is a farm-imagery analysis wrapper, but it also silently creates or reuses identities, uploads data to external services, and stores account tokens locally without enough user control.
Review before installing. Use this only if you are comfortable with UAV imagery, report queries, and identity-linked requests being sent to the configured external service, and with a local workspace database storing generated user records and service tokens. Prefer an explicit login/consent flow and endpoint scoping before using it with sensitive farm, geospatial, or business data.
if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
if offset:
query = query.offset(offset)if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
return query.scalar()
finally:"source": ConstantEnum.DEFAULT__SKILL_HUB_NAME
}
try:
_response = requests.post(_url, json=_data)
if _response.status_code == 200:
_response_json = _response.json()
if _response_json and _response_json.get("success"):| 📚 文档读取 | 仅在需要时读取参考文档，保持上下文简洁 | | 📁 格式支持 | 输入要求：支持 jpg/png/tiff 影像或 mp4/avi/mov 视频，最大 10MB；建议提前完成拼接或上传单张高质量正射影像 | | 🔎 使用提醒 | 多光谱影像需包含 NIR 波段才能计算 NDVI/NDRE 等真植被指数；纯 RGB 影像将回退使用 VARI/ExG | | 🧑⚖️ 结果性质 | 分析结果仅作为田块管理与变量作业的参考，实际作业请结合现场实地踏查 | | 🚫 脚本限制 | 禁止临时生成脚本，只能用技能本身的脚本 | | 🌐 网络地址 | 传入的网络地址参数，不需要下载本地，默认地址都是公网地址，api 服务会自动下载 | | 📜 报告输出 | 当显示历史分析报告清单的时候，从接口返回 json 数据中提取字段 作为超链接地址，且自动转化为如下 Markdown |
VirusTotal findings are pending for this skill version.
Detected: suspicious.install_untrusted_source